Robloxat Privacy Policy

Last updated: 26 September 2026

Robloxat is an independent marketplace for digital game items operated by Alaab FZE (ألعاب م م ح), a Free Zone Establishment registered in the United Arab Emirates. Formation number: 4432103; trade licence: 4432103.01, issued by Sharjah Publishing City – Free Zone Authority. Registered address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. Alaab FZE is the controller of the personal data described in this notice.

For support, complaints and personal-data requests: support@robloxat.com; telephone +971558169247. Do not email identity documents.

Information we process

We process the account information needed for the sign-in method you choose, your profile name and avatar, language and currency preferences, and records of your account activity. Email sign-in uses your email address. Google sign-in can provide your account identifier, email, display name and profile image.

If you choose Snapchat sign-in, we receive an identifier specific to Robloxat and your Snapchat display name. If you allow Bitmoji access and have an available Bitmoji, we also receive its image URL. We store that URL to display your avatar in your Robloxat profile. We may refresh the URL when you sign in again. Your own uploaded profile image takes priority. Declining Bitmoji access does not prevent sign-in. Snapchat does not provide your email address through this integration. We do not request Snapchat contacts, messages or publishing access.

If you choose Facebook sign-in, we receive your app-specific Facebook identifier, name and available profile image URL under the public_profile permission. We use these to create or find your Robloxat account and display your profile. We do not request Facebook email, friends, posts, messages or publishing permissions. Your uploaded avatar takes priority; the Facebook image URL may be refreshed at login.

We also process public game usernames and the order, payment-status, delivery, wallet and support records needed for the features you use. Payment providers handle payment credentials; Robloxat does not need your full card details. Technical records can include IP addresses, browser/device information, session records and security events. Do not send us game passwords, account cookies, authentication codes or social-provider credentials.

How we use information

We use this information to create and secure your account, identify returning users, display your profile, maintain preferences, fulfil orders, verify delivery, provide support and prevent fraud or abuse. We also use records where necessary to resolve disputes and meet applicable legal obligations. Snapchat sign-in and the display of your Bitmoji are optional account features with no separate fee.

Cookies and third-party services

Necessary cookies maintain login sessions and protect sign-in. Browser storage can remember device preferences such as language, currency and theme. Blocking necessary cookies can prevent sign-in from completing.

Choosing Snapchat opens Snapchat's authentication service. Loading a Bitmoji image causes your browser to request that image from Snap's image service, which receives the connection information needed to deliver it. We do not send your orders or payment records to Snapchat as part of Login Kit. Snapchat's handling of information is also governed by the Snap Privacy Policy, which is incorporated by reference for this integration. Facebook sign-in opens Meta's authentication service. Loading its profile image connects your browser to Meta's image service. These requests disclose the network information necessary to deliver the service. We do not share Robloxat order or payment records with Facebook for sign-in. Meta's processing is described in the Meta Privacy Policy. Google and payment providers have their own privacy notices for the services you choose.

Sharing and international processing

We do not sell your personal information. We disclose information to service providers where necessary for hosting, authentication, payments, fulfilment, security or support, and where required by law or necessary to establish or protect legal rights. These providers can process information outside the UAE; applicable safeguards and transfer requirements depend on the service and the countries involved.

Identity and payment checks

Checks may be needed when payer and account details conflict, activity suggests unauthorized payment or account takeover, or a lawful provider requirement applies. We explain the request where legally and safely possible. A complaint or refund request alone is not evidence of fraud.

We first use existing records and the least intrusive evidence, such as an order reference or redacted payment confirmation. Identity documents may be requested only when necessary and lawful. Before collection, we explain the purpose, required fields, recipient, retention criteria and secure submission method. Do not email identity documents or send passwords, login codes, full card details or game cookies. Never make a verification payment or trade. Data is limited to the check and applicable legal needs; access is restricted and unnecessary copies are deleted.

We may temporarily pause the affected operation while a necessary check is completed. If evidence is insufficient, we explain lawful alternatives, any restriction and how to request human review at support@robloxat.com. We do not automatically confiscate a balance or reject a statutory refund because verification is pending. Required legal deadlines and remedies remain. Parents or representatives may need to establish their authority.

Retention and security

Account and profile data are retained while needed to provide the account. Transaction and security records may be retained longer where needed for accounting, fraud prevention, disputes or legal obligations. Retention depends on the record's purpose and applicable requirements; information that is no longer needed should be deleted or anonymized.

Snap access tokens are used by the server to complete sign-in and obtain the authorized profile information; this integration does not persist Snap access or refresh tokens. The Bitmoji image itself is served by Snap; we store its URL. Facebook access tokens are also used only for the server-side sign-in and profile checks; this integration does not persist them or send them to the browser. We store the Facebook image URL, not a downloaded copy of the image. Access controls and encrypted network connections help protect information.

Your choices and data requests

You can choose another sign-in method, decline optional Bitmoji permission, replace your avatar with an uploaded image, and revoke Robloxat's access in Snapchat's connected-app settings. Revoking access in Snapchat does not itself delete your Robloxat account or previously stored records.

To request access, correction, deletion, restriction or withdrawal of consent, email support@robloxat.com. State your request and enough information to identify your Robloxat account. Never include passwords, session tokens or full card details. We may verify account ownership before acting. The rights and response requirements that apply depend on your location. Where a record must be retained for a legal reason, we will explain the limitation when permitted. Requests to remove Snapchat-derived profile data can be made through the same contact. Facebook-derived account and profile data can also be removed through that contact. Explicit steps are on our data deletion page. Removing Robloxat from Facebook's Apps and websites settings revokes future Facebook access; it does not itself delete your Robloxat account or stored data.

Younger users and changes

Snapchat sign-in requires eligibility to use Snapchat under its own age rules. A parent or guardian concerned about a child's information can contact support@robloxat.com to request review and appropriate action. Payment and other features may have additional eligibility requirements.

We may update this policy as the service changes. The published policy will show its revision date and material changes will receive an appropriate notice.